SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with r
SiteGuard Server Edition Ver2.20 and later is affected only when the statistics feature is enabled, across the Apache httpd, Nginx, and IIS builds, including FreeBSD variants. Fixed in Ver8.00 Update 5 (Ver7.00 Update 6 on FreeBSD).
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Listed in CISA KEV
- How many real-world setups can hit the bug, from the vendor's advisory and CISA data. It does not know your setup.What do these mean? →
- Actively exploited
- Fix
- Fixed in Ver8.00 Update 5, Ver3.10, Ver7.00 Update 6
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: active
- Automatable: no
- Technical impact: total
Summary
SiteGuard Server Edition, a security product, is affected by an OS command injection flaw. An attacker could exploit it to run arbitrary operating system commands with root or SYSTEM privileges on the host running the software.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: active · Automatable: no · Technical impact: total
- Added to CISA KEV
CISA has evidence of exploitation in the wild
- Record last updated
- CISA remediation deadline
Due date for US federal agencies to patch
Affected versions
- EG Secure Solutions Inc. SiteGuard Server Edition for Apache httpd
From Ver2.20 · fixed in Ver8.00 Update 5
- EG Secure Solutions Inc. SiteGuard Server Edition for Nginx
From Ver2.20 · fixed in Ver8.00 Update 5
- EG Secure Solutions Inc. SiteGuard Server Edition for IIS
From Ver2.20 · fixed in Ver3.10; From Ver4.00 Update 5 · fixed in Ver8.00 Update 5
- EG Secure Solutions Inc. SiteGuard Server Edition for Apache httpd on FreeBSD
From Ver2.20 · fixed in Ver7.00 Update 6
- EG Secure Solutions Inc. SiteGuard Server Edition for Nginx on FreeBSD
From Ver2.20 · fixed in Ver7.00 Update 6
References 2
eg-secure.co.jp
jvn.jp
Questions about CVE-2026-106931
What does this mean?
The flaw is an OS command injection in SiteGuard Server Edition's statistics processing. It may allow an attacker to run arbitrary OS commands with root or SYSTEM privileges on the system running the product.Source: jvn.jp
Am I affected, and how do I check?
Versions Ver2.20 and later are in scope, but only when the statistics feature is enabled. The affected builds are SiteGuard Server Edition for Apache httpd, Nginx, and IIS, including the FreeBSD variants of Apache httpd and Nginx. To check, confirm your product version and whether the statistics feature is turned on in the product.Source: jvn.jp
What should I do about it?
Upgrade to Ver8.00 Update 5 for the Apache httpd, Nginx, and IIS builds, or to Ver7.00 Update 6 for the FreeBSD builds. For IIS, Ver3.10 is the fixed release for the older line.Source: jvn.jp
Is it being exploited?
Yes. CISA added it to its Known Exploited Vulnerabilities catalog on 2026-10-20, which means it has evidence of attacks. No public exploit code is tracked.Source: cisa.gov, cve.now feed data